Charles Pratt & Co. LLC

Charles Pratt & Company, LLC notified the NH AG of a phishing incident where an employee clicked a malicious link, compromising their email. The attacker used the account to execute a Business Email Compromise (BEC) fraud on June 26, 2025. Forensic review later revealed the attacker accessed a file containing client PII (SSNs, DOBs, bank accounts) around June 23, 2025. One NH resident was notified.

Charles Pratt & Co. LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-12-11. 15 Massachusetts residents were affected.

Charles Pratt & Co. LLC reported a phishing incident where an employee clicked a malicious link, allowing an intruder to access email and initiate a fraudulent wire transfer. The intruder later accessed a file containing SSNs, DOBs, addresses, and bank account numbers. 65 individuals affected. FBI notified; forensic firm Cypfer engaged.

Charles Pratt & Company, LLC notified Vermont AG of a phishing incident where an employee clicked a malicious link, allowing an intruder access to email and a file containing client PII (SSNs, DOBs, addresses, bank account numbers). The intruder also initiated a fraudulent wire transfer which was reversed. The company engaged forensic firm Cypfer, implemented security enhancements, and offered 2 years of identity protection.